Fake Git Campaign Uses 7,600 GitHub Repositories to Spread Smart Loader Malware
Summary: Researchers at Island found nearly 7,600 malicious GitHub repositories, more than 800 of them posing as AI skills or MCP servers, in a campaign called FakeGit that delivers SmartLoader and then the StealC information stealer. The repositories, created by about 6,600 profiles, had recorded more than 14 million downloads across GitHub Release assets in roughly 200 campaign repositories as of July 2026, and Island's tests found Anthropic Claude Code, Google Gemini, and OpenAI ChatGPT would surface the malicious repositories when prompted to find skills or MCP servers.
Key Takeaway: More than 600 campaign listings have been flagged on public MCP and Skill registries such as LobeHub, Glama, MCP.so, and MCP Market, so an agent searching for a skill can find the lure, read the attacker's README, and carry its instructions forward with no person involved.
Read the original at The Hacker News ↗
- Topics
- Malware
- Related
- ARTEX and beyond: AI-enabled penetration testing platforms Cyber Risks · Nov 13, 2026Fake GTA 6 download goes after Steam logins and crypto wallet data Cyber Risks · Nov 13, 2026Operation Endgame Takes Down Gootloader, CastleRAT and StealC Servers, Seizes 6.4M Stolen Logins Cyber Risks · Nov 13, 2026